What Does an SEO Agency Actually Do? (And How to Know If Yours Is Working)

A legitimate SEO agency delivers six categories of work every month: technical SEO monitoring and fixes, content creation and optimisation, link building, Google Business Profile management (for local businesses), performance reporting, and strategic planning. You should receive a monthly report covering keyword rankings, organic traffic, content published, links built, and technical issues resolved — with specific numbers, not vague summaries. An agency that can't show you exactly what they did this month and what it produced is not doing the job.

Most businesses that hire an SEO agency have no idea what they're actually paying for each month. They see a dashboard, receive a PDF report, hear "we're making progress" — and trust that something is happening.

Sometimes something is. Often, not enough. Occasionally, nothing at all.

This guide tells you exactly what a legitimate SEO agency does, what you should receive every single month, and the specific signals that tell you whether your agency is genuinely moving the needle — or just sending you reports full of graphs that don't translate into revenue.

We run SEO campaigns for 500+ US businesses. We've also inherited dozens of accounts from agencies who convinced their clients they were doing SEO while doing very little of it. The red flags are consistent and recognisable once you know what to look for.

The Six Things a Legitimate SEO Agency Does Every Month

A credible monthly retainer in 2026 includes work across six pillars, and none should be entirely absent. Here's what each pillar means in practice.

1. Technical SEO — Finding and Fixing What Stops You from Ranking

Technical SEO is the foundation. Every other element of the campaign — content, links, strategy — only performs at full strength if the technical health of your site is sound.

What a legitimate agency does technically each month:

• Crawl audit: Running an automated crawl (Screaming Frog, Ahrefs, or similar) to identify broken links, redirect chains, duplicate content, missing canonical tags, thin pages, and indexing errors
• Core Web Vitals monitoring: Tracking LCP, CLS, and INP scores — Google's page experience metrics — and flagging pages that fail threshold
• GSC coverage report review: Checking which pages are indexed, which are excluded, and why — then fixing crawl blocks, noindex tags, and submission errors
• Schema markup: Adding or updating structured data (FAQPage, LocalBusiness, Article, Product) that helps Google understand your content and qualify for rich results
• Site speed: Identifying image compression issues, render-blocking scripts, server response times — and either fixing them or flagging them for your development team with specific instructions

What you should receive: A list of specific technical issues identified this month, whether they were fixed or recommended for your developer, and what effect previous fixes had on crawlability or indexing.

Red flag: "We're monitoring your technical SEO" with no list of specific issues found or resolved.

2. Keyword Research and Strategy — Knowing What to Target and Why

Keyword research isn't a one-time activity done at campaign launch. It's an ongoing process as your site gains authority and becomes capable of ranking for progressively more competitive terms.

What a legitimate agency does strategically each month:

• Keyword gap analysis: Comparing your current rankings against competitors to identify queries they rank for that you don't — these are direct traffic and lead opportunities
• Content opportunity identification: Finding queries with commercial or informational intent that your site has no content for yet
• Cannibalization monitoring: Checking whether multiple pages compete for the same keyword — splitting authority and suppressing both
• SERP feature tracking: Identifying queries where AI Overviews, featured snippets, or map packs appear — and adjusting content strategy to target those appearances

What you should receive: A content priority list for the coming month, explaining which keywords are being targeted, why they were selected, and what page will target each one.

Red flag: No content plan. No explanation of which keywords are being targeted or why.

3. Content Creation and Optimisation — The Work That Builds Rankings

An SEO agency that reports on leads and revenue rather than just traffic and positions is doing the job correctly. But generating those leads requires consistent, high-quality content production — not just SEO reports.

What a legitimate agency produces monthly:

• New content: 2–6 pieces per month depending on campaign tier — blog posts, service pages, location pages, or landing pages
• Existing content optimisation: Updating underperforming pages — refreshing statistics, improving structure, adding FAQs, tightening keyword targeting
• Internal linking: Adding contextual links between related pages to distribute authority and improve crawl efficiency
• Meta title and description updates: Rewriting underperforming title tags and meta descriptions to improve click-through rates

What you should receive: A list of URLs published or updated this month, with the primary keyword targeted on each and the month-over-month ranking and traffic change for pages updated in previous months.

Red flag: No new content published this month. No list of specific pages updated. "We're working on your content strategy" with nothing to show for it.

4. Link Building — Earning the Authority That Drives Rankings

Backlinks remain one of Google's primary ranking signals in 2026. An agency that doesn't build links isn't building rankings — they're maintaining them at best.

What a legitimate agency does for link building monthly:

• Prospecting: Identifying relevant, high-authority websites to target for guest posts, resource page inclusions, or editorial mentions
• Outreach: Sending and following up on personalised pitch emails to editors and site owners
• Content creation: Writing guest articles and pitch materials that meet editorial standards of target publications
• Link placement: Securing and verifying live backlinks with appropriate anchor text pointing to target pages
• Reporting: Providing the domain name, DR/DA score, URL of the live link, anchor text used, and the page on your site it points to

What you should receive: A list of every link built this month — the linking domain, its authority score, the URL of the published piece, and which page on your site received the link. No exceptions.

Red flag: "We're building high-quality links" with no list of specific placements. Or a list of directory submissions from DA 5 sites presented as link building. Or any mention of "private blog networks."

You should see tangible outputs: shipped deliverables, published or updated pages, content briefs, outreach activity, and a monthly narrative that explains what changed and what happens next. If all you get is rankings, you are missing the operating system.

5. Google Business Profile Management (Local Businesses)

For any business targeting local customers, GBP is a separate ranking system from organic search — and it requires its own monthly attention.

What a legitimate agency does for GBP monthly:

• Weekly posts: 1–4 posts per month covering services, promotions, team updates, or educational content
• Photo updates: New photos added regularly — Google rewards active, updated profiles with better visibility
• Review monitoring: Flagging new reviews (positive and negative) and drafting professional response templates
• Q&A management: Answering questions in the Q&A section before competitors or spammers do
• Category and attribute audit: Verifying that primary and secondary categories are correct and that all relevant attributes are selected
• Insight reporting: Monthly GBP performance data — searches, views, calls, direction requests, and website clicks

What you should receive: GBP insight data for the month, a list of posts published, any reviews that require your response, and any category or attribute changes made.

Red flag: No GBP activity report. A fully optimised GBP that hasn't had a post in 6 weeks.

6. Performance Reporting — The Proof That Work Is Happening

A complete report includes an executive summary with the period's primary performance story, a keyword ranking report showing position changes from a defined baseline, organic traffic trends from Google Analytics, technical site health status backlink growth data, a list of completed campaign actions, and a clearly defined plan for the next reporting period.

What every monthly report from a legitimate agency should contain:

What you should receive: This exact report, monthly, on a consistent date, with specific numbers — not ranges, not approximations, not "traffic is trending positively."

The Complete Monthly Deliverables Checklist

Print this out. If your agency can't tick every box, ask why.

Technical:

• ☐ Crawl audit completed — issues listed with URLs
• ☐ GSC coverage report reviewed — indexing errors addressed
• ☐ Core Web Vitals checked — failing pages identified
• ☐ Schema markup updated or added where applicable
• ☐ Broken links fixed or flagged for dev

Content:

• ☐ [Number] new pieces published — list of URLs provided
• ☐ [Number] existing pages updated — list of URLs provided
• ☐ Internal links added between relevant pages
• ☐ Meta titles/descriptions updated where CTR is low

Link Building:

• ☐ [Number] links built — list with domain, DR, URL, anchor text
• ☐ Outreach activity reported — emails sent, responses received
• ☐ No PBN or spam links — all placements on real, trafficked sites

Local (if applicable):

• ☐ GBP posts published — list provided
• ☐ Review responses drafted
• ☐ GBP insight data included in report

Reporting:

• ☐ Keyword ranking changes with specific numbers
• ☐ Organic traffic data from GA4
• ☐ Lead/conversion data attributed to organic
• ☐ Next month action plan included

If three or more of these boxes are consistently empty month after month, the campaign is not being run correctly.

7 Red Flags That Tell You Your Agency Isn't Working

These are the patterns we see consistently when businesses bring us accounts to audit after a failed SEO engagement.

Red Flag 1: "We're working on it" with no specifics A legitimate agency can tell you exactly what they worked on this week. If the answer to "what did you do this month?" is consistently vague — "we're building your authority," "we're optimising your site" — with no URLs, no domains, no specific actions, the work isn't being done.

Red Flag 2: Rankings reports without traffic or lead data Rankings are an input. Leads are the output. An agency that reports only on rankings — especially if those rankings are for low-volume keywords nobody searches — is measuring inputs to avoid accountability for outputs. Your report should show organic sessions, leads, and revenue attribution alongside rankings.

Red Flag 3: No content published in the last 30 days Content is the primary mechanism for building topical authority and ranking for new keywords. If no new content has been published in a month, the campaign is either stalled or being deprioritised. Ask for the content calendar and the content published in the last 90 days.

Red Flag 4: Link building with no specifics "We've been building high-quality links" is not a link report. Every link built should be verifiable: you can visit the page, see your link, check the domain's authority. If your agency won't give you a list of specific domains where your links now live, ask yourself what they're hiding.

Red Flag 5: Month-over-month traffic decline with no explanation Traffic drops happen — Google updates, competitor gains, seasonal fluctuations are all real. But a legitimate agency explains the drop with specific causes and a specific response plan. "Traffic dipped a bit this month, we'll monitor it" is not an explanation.

Red Flag 6: Every metric is "up" every month The opposite problem: reports that always show improvement, regardless of what's actually happening. Cherry-picked metrics, selectively reported periods, and vanity metrics (total impressions, DA scores) that improve regardless of campaign performance are ways of hiding results that aren't materialising. Ask specifically: what is the organic lead count from Google Analytics this month?

Red Flag 7: No strategy for AI search In 2026, comprehensive agency reports also include AI search visibility data showing whether the client's content is being cited in AI-generated answers. Google AI Overviews now appear on a significant percentage of searches. If your agency hasn't mentioned AI Overviews, ChatGPT visibility, or GEO optimisation in any conversation or report since 2025, they're working off a 2022 playbook.

7 Green Flags That Tell You Your Agency Is Doing the Job

Not all agencies are cutting corners. Here's how to recognise one that isn't.

Green Flag 1: You receive a monthly report you can actually read Plain English executive summary. Specific numbers. Honest interpretation — including what didn't go as expected. An agency that explains bad months builds more trust than one that hides them.

Green Flag 2: They can tell you the exact keywords they're targeting and why A clear keyword strategy with primary and secondary targets per page, volume data, competition assessment, and the reasoning behind the priorities. Not "we're targeting SEO keywords" — specific queries with specific rationale.

Green Flag 3: You can verify every link they've built A list of live URLs where your backlinks appear. Click every one. If they're real editorial placements on real websites with real traffic, the link building is legitimate. If they're bulk directory submissions or foreign-language blog posts with no readers, they're not.

Green Flag 4: They bring problems to you before you find them A proactive agency flags a Google algorithm update before you notice a traffic drop. They identify a technical issue before it affects rankings. They tell you when a content piece isn't performing and propose a fix. Reactive agencies explain problems after they've damaged results. Proactive ones prevent the damage.

Green Flag 5: The report includes organic lead numbers, not just traffic If your agency has set up GA4 conversion tracking correctly, they can tell you: this month, organic search generated X form submissions, Y phone calls, Z bookings. If they're reporting sessions and positions but not leads, the campaign isn't being measured against the metric that matters to your business.

Green Flag 6: They tell you honestly when something won't work The best agencies say "no" occasionally. They tell you a keyword is too competitive for your current authority. They advise against a content idea because the search intent is wrong. An agency that agrees with everything you propose, never challenges your assumptions, and never brings bad news is either not paying attention or not confident enough to be honest.

Green Flag 7: They've adapted their approach for AI search FAQPage schema as standard on all content. Structured answer formatting at the top of articles. Entity building through consistent brand signals. Content structured for AI extraction. If your agency can describe what they're doing specifically to improve your AI search visibility, they're working with 2026 reality.

Doing this manually takes weeks. We do it in days.

W3Era builds 50+ quality backlinks/month for US businesses — social bookmarking, guest posts, citations.

Get a Free Link Building Plan for My Site

Not sure if your current SEO agency is doing the job?

Send us your last 3 monthly reports. We'll review them in 20 minutes and tell you honestly:

• Whether the work being reported is the right work
• Whether the results are on the right trajectory for your market
• What's missing and what it would take to fix it

We do this for free because most businesses that ask us to audit their current agency become W3Era clients — not because we pressure them, but because the audit makes the gap obvious.

[Your Website URL] _________________ [Your Email] _________________

Get a Free Agency Audit

What W3Era Reports Every Month — Our Format as a Benchmark

We include this so you have a specific standard to compare your current reporting against.

Every W3Era client receives a monthly report on the first week of each month containing:

Section 1 — Executive Summary (1 page, plain English) What we did this month. What moved. What didn't move and why. What we're changing next month based on this month's data. Readable in 3 minutes without looking at a single graph.

Section 2 — Keyword Rankings Every tracked keyword with its current position, previous month position, and 3-month trend. Highlighted in green (improved), red (declined), or grey (stable). No hiding the red ones.

Section 3 — Organic Traffic GA4 data: sessions, users, engagement rate, and conversions from organic search. Month-over-month and year-over-year comparison. If traffic dropped, the explanation is here — specific, not vague.

Section 4 — Organic Leads Form submissions, phone calls, and bookings attributed to organic search in GA4. This is the number your business cares about — it's in every report, not buried or omitted.

Section 5 — Content Published Every URL published this month. Primary keyword. Word count. Current ranking if it's been live long enough to rank. Performance of content published in previous months.

Section 6 — Links Built Every backlink secured this month. Domain name. DR score. Live URL. Anchor text. Target page on your site. Clickable — you can verify every single one.

Section 7 — Technical Issues identified in this month's crawl audit. Issues fixed. Issues pending your developer. GSC coverage changes. Core Web Vitals status.

Section 8 — AI Search Visibility AI Overview appearances for tracked keywords. Whether your content is being cited in AI-generated answers. Entity strength assessment. Changes made to improve citation rate.

Section 9 — Next Month Plan Specific actions for the coming month. Keywords being targeted. Content being written. Outreach targets. Technical fixes scheduled. Not "we'll continue building your SEO" — specific tasks with expected outcomes.

This is the standard. If your current agency's report covers all nine sections with specific numbers, they're doing the job. If it covers two or three with vague summaries, you now know what you're missing.